Lucene search
K

9528 matches found

The Hacker News
The Hacker News
added 2024/10/17 1:54 p.m.8 views

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program

Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service RaaS called Cicada3301 after successfully gaining access to the group's affiliate panel on the dark web. Singapore-headquartered Group-IB said it contacted the threat actor behind the Cicada3301...

7.7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:16 p.m.6 views

Malicious code in rustc_codegen_cranelift-github-release (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/10/16 1:0 p.m.3 views

MAL-2024-9676 Malicious code in js-rust-grpc-quotes (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
NVD
NVD
added 2024/10/15 3:15 p.m.14 views

CVE-2024-47080

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...

8.7CVSS0.00682EPSS
Exploits0References3
OSV
OSV
added 2024/10/15 2:53 p.m.13 views

CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...

8.7CVSS6.5AI score0.00682EPSS
Exploits0References5
CVE
CVE
added 2024/10/15 2:53 p.m.62 views

CVE-2024-47080

CVE-2024-47080 affects matrix-js-sdk (Matrix Client-Server SDK for JavaScript/TypeScript). In versions 9.11.0–34.7.0, MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers because it unconditionally sends shared history keys to all invited devices, regardless o...

8.7CVSS6.4AI score0.00682EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/10/15 2:53 p.m.10 views

CVE-2024-47080

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. In matrix-js-sdk versions versions 9.11.0 through 34.7.0, the method MatrixClient.sendSharedHistoryKeys is vulnerable to interception by malicious homeservers. The method was introduced by MSC3061 and is commonly used to...

8.7CVSS5.5AI score0.00682EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.13 views

[SECURITY] Fedora 41 Update: rust-tower-http-0.6.1-1.fc41

Tower middleware and utilities for HTTP clients and servers...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.10 views

[SECURITY] Fedora 41 Update: rust-tower-0.5.1-1.fc41

Tower is a library of modular and reusable components for building robust clients and servers...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.13 views

[SECURITY] Fedora 41 Update: rust-tonic-0.12.3-1.fc41

A gRPC over HTTP/2 implementation focused on high performance, interoperability, and flexibility...

6.9CVSS3.7AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.9 views

[SECURITY] Fedora 41 Update: rust-rustls-native-certs0.7-0.7.3-1.fc41

Rustls-native-certs allows rustls to use the platform native certificate store...

6.9CVSS3.6AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.11 views

[SECURITY] Fedora 41 Update: rust-tonic-build-0.12.3-1.fc41

Codegen module of tonic gRPC implementation...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.10 views

[SECURITY] Fedora 41 Update: rust-tower-http0.5-0.5.2-1.fc41

Tower middleware and utilities for HTTP clients and servers...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.11 views

[SECURITY] Fedora 41 Update: rust-tonic-types-0.12.3-1.fc41

A collection of useful protobuf types that can be used with tonic...

6.9CVSS3.7AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.10 views

[SECURITY] Fedora 41 Update: rust-reqwest-0.12.8-1.fc41

Higher level HTTP client library...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
Fedora
Fedora
added 2024/10/15 12:19 a.m.12 views

[SECURITY] Fedora 41 Update: rust-hyper-rustls-0.27.3-1.fc41

Rustls+hyper integration for pure rust HTTPS...

6.9CVSS3.8AI score0.00597EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/10/14 12:0 a.m.6 views

Fedora: Security Advisory (FEDORA-2024-8831059030)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References7
OpenVAS
OpenVAS
added 2024/10/14 12:0 a.m.6 views

Fedora: Security Advisory (FEDORA-2024-b9fc60e1f0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References7
Fedora
Fedora
added 2024/10/12 1:52 a.m.10 views

[SECURITY] Fedora 39 Update: rust-brotli-7.0.0-2.fc39

A brotli compressor and decompressor that with an interface avoiding the rust stdlib. This makes it suitable for embedded devices and kernels. It is designed with a pluggable allocator so that the standard lib's allocator may be employed. The default build also includes a stdlib allocator and...

7.5AI score
Exploits0
Fedora
Fedora
added 2024/10/12 1:52 a.m.9 views

[SECURITY] Fedora 39 Update: rust-libcramjam-0.3.0-6.fc39

Compression library combining a plethora of algorithms in a similar as possible API...

7.3AI score
Exploits0
Rows per page
Query Builder